A vulnerability has been identified in Cisco IOS devices, which allows malicious people on a LAN (Local Area Network) to manipulate the device's routing table.

The vulnerability is caused by the device accepting ICMP redirects when IP routing has been explicitly disabled. By sending a bogus ICMP redirect a malicious person can exploit the vulnerability to disrupt communication by specifying a gateway with an unused IP address or intercept communication from the device by specifying the attacker's IP address as gateway.

Solution
Upgrade to a fixed release of IOS:
Further details available to Secunia VIM customers

Provided and/or discovered by
Ofir Arkin

Deep Links
Links available to Secunia VIM customers